CVE-2014-3102: XSS

Published Aug 12, 2014

Updated

Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 7.0.0 through 7.0.0.2 CF28 and 8.0.0 before 8.0.0.1 CF13 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.

Affected Software

4 affected components

IBM WebSphere Portal=7.0.0.0

IBM WebSphere Portal=7.0.0.1

IBM WebSphere Portal=7.0.0.2

IBM WebSphere Portal=8.0.0.0

Remediation

Patch Available

http://www-01.ibm.com/support/docview.wss?uid=swg21680230

Event History

Aug 12, 2014

CVE Published

via MITRE·01:00 AM

Data Sourced

via MITRE·01:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2014-3102?

CVE-2014-3102 is classified as a medium severity vulnerability due to its potential for exploiting cross-site scripting (XSS).

How do I fix CVE-2014-3102?

To mitigate CVE-2014-3102, upgrade IBM WebSphere Portal to version 8.0.0.1 or later, or apply the appropriate patches provided by IBM.

Who is affected by CVE-2014-3102?

CVE-2014-3102 affects IBM WebSphere Portal versions from 7.0.0 through 7.0.0.2 CF28 and 8.0.0 before 8.0.0.1 CF13.

Can CVE-2014-3102 be exploited remotely?

Yes, CVE-2014-3102 can be exploited remotely by authenticated users through crafted URLs that inject scripts or HTML.

What type of vulnerability is CVE-2014-3102?

CVE-2014-3102 is a cross-site scripting (XSS) vulnerability that allows the injection of arbitrary web scripts or HTML.